medium5.4
CVE-2024-11670
Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authen…
Impact
Incorrect authorization in the permission validation component of Devolutions Remote Desktop Manager 2024.2.21 and earlier on Windows allows a malicious authenticated user to bypass the "View Password" permission via specific actions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devolutions | Remote Desktop Manager | through 2024.3.10.0 |